This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft File: 1DySR0_tODyV-izNg9YU9X5WPYI.mft (raw, json) Hash identifier: Em6vD+cmXPsIJTB6BSNnNY/byg/AeZwXWV4sAVnbVYE= Subject key identifier: 2E:A7:27:00:FD:41:1B:12:5D:51:B1:02:F6:49:F7:95:04:CA:B9:C1 Authority key identifier: D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82 Certificate issuer: /CN=d43c92474fed383c95fa2ccd83d614f57e563d82 Certificate serial: 019B413638D2537C8D4FEB6FA863DFB0D4E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 14:00:31 +0000 Manifest this update: Sun 21 Dec 2025 14:00:31 +0000 Manifest next update: Mon 22 Dec 2025 14:00:31 +0000 Files and hashes: 1: 1DySR0_tODyV-izNg9YU9X5WPYI.crl (hash: MZT3LrqZkfqWHfBS6M5jo1i9e8eG/XuOEYG1TNJJT9c=) 2: YeNb4uILFMttwTAEJ0OqaURJezM.roa (hash: TrCAXhjpMq5IYAz3anoVsFKGrU1fVwfTtHHZACZFwhI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:38:d2:53:7c:8d:4f:eb:6f:a8:63:df:b0:d4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d43c92474fed383c95fa2ccd83d614f57e563d82 Validity Not Before: Dec 21 14:00:31 2025 GMT Not After : Dec 22 14:00:31 2025 GMT Subject: CN=2ea72700fd411b125d51b102f649f79504cab9c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fe:62:dc:e2:00:60:c6:08:40:b3:db:5d:28: b9:b2:e4:ff:ec:d6:0c:3f:1c:0e:ab:cd:6e:f7:6b: 41:7d:ee:13:15:15:6b:88:0d:aa:e5:77:48:62:84: d9:a5:e7:5c:ae:08:68:00:2f:06:9d:b5:e3:bd:06: 8a:0d:f7:b7:17:df:0d:2a:77:f6:8f:aa:d5:46:93: bb:1a:de:b5:a3:44:b8:22:00:f9:45:ab:11:5a:93: d6:4e:e3:81:29:d0:ac:5a:f0:8d:11:52:4b:bc:b6: 79:b7:43:92:9c:46:7a:c8:f5:79:b0:f1:6d:56:c1: 8e:aa:3b:c9:7a:1d:89:d8:fb:1a:12:96:ef:3f:b7: 7d:d3:51:50:22:b2:cb:4c:b2:ca:d2:74:bd:4a:14: b6:33:ab:83:d7:26:83:20:fe:b6:c3:b4:45:f2:80: 26:af:37:62:27:12:37:68:46:58:29:44:7a:8a:dd: 8c:1f:9a:3f:77:0f:16:4b:ec:5d:90:db:c9:69:2f: b3:6b:dd:3d:f2:ff:c9:01:61:c2:aa:50:80:cb:43: 2d:65:10:ad:44:58:16:c2:e7:20:74:db:aa:d8:d5: c0:30:a1:f9:5f:be:00:78:03:11:44:49:48:84:ad: 30:e4:45:7f:81:1c:b2:5f:b8:eb:7f:94:d8:7e:dc: b4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A7:27:00:FD:41:1B:12:5D:51:B1:02:F6:49:F7:95:04:CA:B9:C1 X509v3 Authority Key Identifier: keyid:D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:cc:4e:7c:8e:cf:39:8d:ab:0b:85:c5:f3:11:92:4e:b4:06: 1b:f0:e9:a1:be:c2:a3:b7:3c:f3:18:91:ed:68:fb:02:b5:20: a3:49:02:62:30:92:18:57:b6:0c:15:3d:41:bd:39:b0:3d:6a: f8:5f:d1:c3:e7:fe:b2:cc:35:d1:9b:92:8e:a9:c3:42:f5:7b: a6:df:99:3b:16:82:be:df:2a:4b:0a:6c:a0:e5:d7:8c:5e:00: 66:99:3d:bc:97:2c:3f:4b:ef:2f:14:78:e9:e6:ed:70:05:23: 3a:bf:93:bf:37:05:17:83:49:88:72:02:ff:d8:e9:30:ab:c5: 70:60:e6:51:f6:50:e4:1e:55:68:42:02:00:51:c4:21:91:f0: ab:3b:52:bc:66:07:47:43:67:e7:6f:cb:c5:21:33:18:85:62: c4:2e:90:1f:f8:f7:35:a9:d6:dc:c0:ff:65:36:1b:54:1f:10: d3:3a:30:59:65:e2:66:02:a9:a7:53:ff:09:0d:c5:9d:93:7e: 6e:dc:98:05:da:a0:2f:cf:ea:ee:3a:32:f3:dd:3a:58:76:97: b0:b7:38:3c:65:41:a7:78:1f:bb:53:cf:7c:2d:60:bb:e0:5f: 78:45:4a:00:3b:46:4f:c7:34:9e:16:e3:58:4d:40:c5:77:fe: 03:32:1a:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNjjSU3yNT+tvqGPfsNTgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0M2M5MjQ3NGZlZDM4M2M5NWZhMmNjZDgzZDYxNGY1N2U1 NjNkODIwHhcNMjUxMjIxMTQwMDMxWhcNMjUxMjIyMTQwMDMxWjAzMTEwLwYDVQQD EygyZWE3MjcwMGZkNDExYjEyNWQ1MWIxMDJmNjQ5Zjc5NTA0Y2FiOWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP5i3OIAYMYIQLPbXSi5suT/7NYM PxwOq81u92tBfe4TFRVriA2q5XdIYoTZpedcrghoAC8GnbXjvQaKDfe3F98NKnf2 j6rVRpO7Gt61o0S4IgD5RasRWpPWTuOBKdCsWvCNEVJLvLZ5t0OSnEZ6yPV5sPFt VsGOqjvJeh2J2PsaEpbvP7d901FQIrLLTLLK0nS9ShS2M6uD1yaDIP62w7RF8oAm rzdiJxI3aEZYKUR6it2MH5o/dw8WS+xdkNvJaS+za9098v/JAWHCqlCAy0MtZRCt RFgWwucgdNuq2NXAMKH5X74AeAMRRElIhK0w5EV/gRyyX7jrf5TYfty0NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6nJwD9QRsSXVGxAvZJ95UEyrnBMB8GA1UdIwQY MBaAFNQ8kkdP7Tg8lfoszYPWFPV+Vj2CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUR5U1IwX3RPRHlWLWl6Tmc5WVU5WDVXUFlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84NDFmM2EtYWI4My00ZGQ5LWIxODMt NmIwNmMxNzZiZDVhLzEvMUR5U1IwX3RPRHlWLWl6Tmc5WVU5WDVXUFlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84NDFmM2EtYWI4My00ZGQ5LWIxODMtNmIwNmMxNzZiZDVh LzEvMUR5U1IwX3RPRHlWLWl6Tmc5WVU5WDVXUFlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACcxOfI7P OY2rC4XF8xGSTrQGG/Dpob7Co7c88xiR7Wj7ArUgo0kCYjCSGFe2DBU9Qb05sD1q +F/Rw+f+ssw10ZuSjqnDQvV7pt+ZOxaCvt8qSwpsoOXXjF4AZpk9vJcsP0vvLxR4 6ebtcAUjOr+TvzcFF4NJiHIC/9jpMKvFcGDmUfZQ5B5VaEICAFHEIZHwqztSvGYH R0Nn52/LxSEzGIVixC6QH/j3NanW3MD/ZTYbVB8Q0zowWWXiZgKpp1P/CQ3FnZN+ btyYBdqgL8/q7joy8906WHaXsLc4PGVBp3gfu1PPfC1gu+BfeEVKADtGT8c0nhbj WE1AxXf+AzIabw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:17:22 2025 by rpki-client